https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:41:18.686690+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:6744 ALSA-2023:6744 — Moderate: samba security update 2026-10-03T22:41:18.722922+00:00

Affected: AlmaLinux:9: ctdb, AlmaLinux:9: libnetapi, AlmaLinux:9: libnetapi-devel, AlmaLinux:9: libsmbclient, AlmaLinux:9: libsmbclient-devel, AlmaLinux:9: libwbclient, AlmaLinux:9: libwbclient-devel, AlmaLinux:9: python3-samba, AlmaLinux:9: python3-samba-dc, AlmaLinux:9: python3-samba-devel and 24 more

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: smbd allows client access to unix domain sockets on the file system as root (CVE-2023-3961) * samba: SMB clients can truncate files with read-only permissions (CVE-2023-4091) * samba: "rpcecho" development server allows denial of service via sleep() call on AD DC (CVE-2023-42669)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-06941 bdu:2023-06941 2026-10-03T22:41:18.723031+00:00 bdu:2023-06941 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0831 certfr-2023-avi-0831 — De multiples vulnérabilités ont été découvertes dans<span class="textit"> Samba</span>. Elles permettent à un attaquant… 2026-10-03T22:41:18.723049+00:00 certfr-2023-avi-0831 https://cve.radiocsirt.org/vuln/euvd-2026-261518 EUVD-2026-261518 2026-10-03T22:41:18.723065+00:00 EUVD-2026-261518 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4091 fkie_cve-2023-4091 2026-10-03T22:41:18.723076+00:00

A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured with "acl_xattr:ignore system acls = yes". The SMB protocol allows opening files when the client requests read-only access but then implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create disposition request. The issue arises in configurations that bypass kernel file system permissions checks, relying solely on Samba's permissions.

 https://cve.radiocsirt.org/vuln/ghsa-f6jj-3gjw-frjm GHSA-f6jj-3gjw-frjm 2026-10-03T22:41:18.723101+00:00

A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured with "acl_xattr:ignore system acls = yes". The SMB protocol allows opening files when the client requests read-only access but then implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create disposition request. The issue arises in configurations that bypass kernel file system permissions checks, relying solely on Samba's permissions.

 https://cve.radiocsirt.org/vuln/gsd-2023-4091 gsd-2023-4091 2026-10-03T22:41:18.723119+00:00 gsd-2023-4091 https://cve.radiocsirt.org/vuln/oesa-2023-1753 OESA-2023-1753 — samba security update 2026-10-03T22:41:18.723129+00:00

Affected: openEuler:20.03-LTS-SP1: samba

Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fix(es): A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module &quot;acl_xattr&quot; is configured with &quot;acl_xattr:ignore system acls = yes&quot;. The SMB protocol allows opening files when the client requests read-only access but then implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create disposition request. The issue arises in configurations that bypass kernel file system permissions checks, relying solely on Samba&apos;s permissions.(CVE-2023-4091) A vulnerability was found in Samba&apos;s &quot;rpcecho&quot; development server, a non-Windows RPC server used to test Samba&apos;s DCE/RPC stack elements. This vulnerability stems from an RPC function that can be blocked indefinitely. The issue arises because the &quot;rpcecho&quot; service operates with only one worker in the main RPC task, allowing calls to the &quot;rpcecho&quot; server to be blocked for a specified time, causing service disruptions. This disruption is triggered by a &quot;sleep()&quot; call in the &quot;dcesrv_echo_TestSleep()&quot; function under specific conditions. Authenticated users or attackers can exploit this vulnerability to make calls to the &quot;rpcecho&quot; server, requesting it to block for a specified duration, effectively disrupting most services a…

 https://cve.radiocsirt.org/vuln/rhsa-2023:6209 RHSA-2023:6209 — Red Hat Security Advisory: samba security update 2026-10-03T22:41:18.723164+00:00

samba: smbd allows client access to unix domain sockets on the file system as root samba: SMB clients can truncate files with read-only permissions samba: "rpcecho" development server allows denial of service via sleep() call on AD DC

 https://cve.radiocsirt.org/vuln/rhsa-2023:6744 RHSA-2023:6744 — Red Hat Security Advisory: samba security update 2026-10-03T22:41:18.723188+00:00

samba: smbd allows client access to unix domain sockets on the file system as root samba: SMB clients can truncate files with read-only permissions samba: "rpcecho" development server allows denial of service via sleep() call on AD DC

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-4091 UBUNTU-CVE-2023-4091 2026-10-03T22:41:18.723206+00:00

Affected: Ubuntu:Pro:14.04:LTS: samba, Ubuntu:Pro:16.04:LTS: samba, Ubuntu:Pro:18.04:LTS: samba, Ubuntu:20.04:LTS: samba, Ubuntu:22.04:LTS: samba, Ubuntu:24.04:LTS: samba

A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured with "acl_xattr:ignore system acls = yes". The SMB protocol allows opening files when the client requests read-only access but then implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create disposition request. The issue arises in configurations that bypass kernel file system permissions checks, relying solely on Samba's permissions.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2620 WID-SEC-W-2023-2620 — Samba: Mehrere Schwachstellen 2026-10-03T22:41:18.723254+00:00

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, Dateien zu manipulieren oder vertrauliche Informationen offenzulegen.